This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 46%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAL%3C/text%3E%3C/svg%3E)
How to do patching on a azure VMSS using Azure update management , What is the process to do it , we are patching VM's using update management , is it possible to patch VMSS also , and what are the things that we need to take care.
The general (and preferred) view for Virtual Machine Scale sets is to update the image every month and then push out the image update to the VMSS.
If you need to, you can add the VM scale set servers to Azure Update Management and patch them; just make sure they are on different schedules, to install.
@Luke Murray - as per microsoft Update management doesnt support VMSS patching ,
Update Management does not support automating update management across all instances in an Azure virtual machine scale set. Automatic OS image upgrades is the recommended method for managing OS image upgrades on your scale set.
Please let me know if my understanding is not correct
Correct, Update Management should be able to patch the servers but it isn't VMSS aware, so won't automatically drain connections etc when it restarts and it may mean the servers end up in different patch states if the image isn't updated.
@Luke Murray What are the suggested ways to patch VMSS servers in periodic and planned way ,
Update the custom image of your VSS scaleset and update the image version across the scaleset.
Or enable automatic upgrade on the VMSS and let the scripts do the install of your apps etc as per your provisioning process, as the OS disk (not days disk) will be replaced.
Azure VMSS is a massive Azure cloud service that allows administrators to manage and monitor their Azure VM instances. Recently, Microsoft released a new Azure VMSS update introducing some security vulnerabilities. If attackers could exploit these vulnerabilities, they could control an affected AzureVM instance completely. To protect your AzureVM instance from attack, you should patch it as soon as possible.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(240, 10%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMM%3C/text%3E%3C/svg%3E)
Don't care about the service. Care about the VM's
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 87%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EO%3C/text%3E%3C/svg%3E)
How to add the VMSS to Azure update manager, i cant find my VMSS there.